module "iam_s3_crm_rw" {
  source      = "../../../modules/iam/policies/s3/buckets_rw"
  name        = "s3_crm_rw"
  name_prefix = local.name_prefix
  bucket_masks = [
    "${local.env_prefix}-crm-ecommerce-data",
    "dev-crm-ecommerce-data"
  ]
}

module "crm_snowflake_role" {
  source             = "../../../modules/iam/roles/client_role"
  name               = "${local.name_prefix}-crm_snowflake_role"
  client_account_id  = "212740118925"
  client_iam_entity  = "user/91n1-s-vast5230"
  client_external_id = "DELPHI_SFCRole=2_VduDow9reaQHwUfs8sKLe5rHk9M="
  common_tags = merge(
    local.common_tags,
    {
      project                  = "Exploration Area",
      service                  = "IAM",
      plat_env_project_service = "${local.aggregated_tag}_EXP_IAM"
    }
  )
  policies_list = [
    module.iam_s3_crm_rw.policy.arn,
  ]
}